Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/jrIGy7HTRXNNUOnJ30DgBflkbyA.roa
File: jrIGy7HTRXNNUOnJ30DgBflkbyA.roa (raw, json)
Hash identifier: ylZ5Rovz8HdHE8ixt+iU+4DAeoHZLiqgqMkSsl/CbwE=
Subject key identifier: 8E:B2:06:CB:B1:D3:45:73:4D:50:E9:C9:DF:40:E0:05:F9:64:6F:20
Certificate issuer: /CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329
Certificate serial: 0197A29DCE9801FE53E923EA05F4BC18A189
Authority key identifier: 23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/jrIGy7HTRXNNUOnJ30DgBflkbyA.roa
Signing time: Tue 24 Jun 2025 15:45:40 +0000
ROA not before: Tue 24 Jun 2025 15:45:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212477
IP address blocks: 2001:3480::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 24 Jun 2025 18:34:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a2:9d:ce:98:01:fe:53:e9:23:ea:05:f4:bc:18:a1:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329
Validity
Not Before: Jun 24 15:45:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8eb206cbb1d345734d50e9c9df40e005f9646f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c6:d5:23:ac:b3:11:86:34:f8:df:16:a0:38:
d2:06:18:ae:f2:5b:bd:17:98:a9:b1:3e:96:aa:bd:
7c:0c:44:4d:c6:0a:24:89:e4:ec:ef:61:21:db:c4:
d3:ec:7a:4d:3a:54:a6:74:4e:48:04:1e:8e:73:48:
8d:7c:24:71:32:32:43:2b:7b:7a:cd:ec:af:03:1a:
d2:c7:a0:a9:e3:06:01:98:fd:7d:be:13:46:43:5d:
dd:66:c3:1c:c8:d5:70:42:f9:83:72:f2:14:a9:6a:
5d:70:31:84:15:0d:8e:a6:50:93:48:29:7d:c1:a1:
ff:a5:28:ce:92:f1:4c:38:19:2e:a1:a3:ca:6a:49:
1d:f6:1b:2f:c9:be:69:61:08:9d:79:dc:7f:08:c1:
fd:ca:00:73:95:38:25:55:2c:09:63:73:7a:9e:e4:
c4:1e:04:72:8d:a7:10:0a:f4:c5:82:98:de:67:ff:
c5:ce:f2:83:87:dc:bb:62:6d:1b:65:b1:16:8e:9d:
15:6f:9d:80:73:5f:92:6f:c9:97:52:d2:90:e7:3e:
19:d2:8b:d0:e0:e6:e3:4d:ad:2a:2e:f3:ba:67:fa:
dc:66:f0:27:62:a9:89:33:69:d6:b2:1d:19:63:92:
e2:fd:2e:aa:af:0a:c2:16:b6:ae:64:0b:5c:17:65:
8b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B2:06:CB:B1:D3:45:73:4D:50:E9:C9:DF:40:E0:05:F9:64:6F:20
X509v3 Authority Key Identifier:
keyid:23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/jrIGy7HTRXNNUOnJ30DgBflkbyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3480::/29
Signature Algorithm: sha256WithRSAEncryption
8b:04:7f:2e:06:62:75:8e:fe:5a:39:38:3a:33:aa:fe:61:79:
7b:ac:8e:28:68:a7:1b:35:8d:8c:ef:03:73:17:af:96:4d:63:
ca:cc:ed:a7:b2:e3:af:9e:5e:1c:5e:58:3a:8a:b2:f4:b7:b6:
d7:00:cf:8c:f9:43:5a:3f:e5:05:ff:1a:bc:0b:74:82:44:dd:
bc:cf:c4:fa:f6:1e:1d:37:b2:10:58:09:5e:03:a6:38:b3:2a:
73:22:7f:46:d4:d4:76:9f:3b:24:7d:9b:db:bd:e5:d9:93:ce:
ef:d3:b6:2d:fc:8f:c3:7e:23:36:9f:53:1b:68:74:1d:1c:92:
56:d9:60:e8:52:4c:de:ae:89:37:36:c4:79:ef:b1:51:b7:ef:
a2:9f:f2:73:95:63:15:98:b6:4e:dd:f6:a0:04:40:73:ab:7f:
60:90:e7:c0:b3:b7:1e:50:e6:21:70:cd:06:99:03:65:fb:08:
07:70:53:9e:c5:f7:eb:f6:63:28:81:cd:1a:23:ce:38:77:04:
c3:ed:13:54:6b:49:80:34:3b:05:3f:72:79:30:bc:2d:94:69:
af:29:52:0d:8d:fd:b5:01:9f:a9:eb:f5:ed:f4:85:b6:b6:ab:
bd:c0:47:4c:9e:a6:26:a8:03:02:67:85:ea:ca:68:6a:90:2a:
ac:9b:e8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:56:15 2025 by rpki-client